NetScaler. The world s most advanced cloud network platform

(1)

NetScaler

The world’s most advanced cloud network platform

NetScaler is the industry’s leading web and application delivery controller that maximizes the

performance and availability of all applications and data, and also provide secure remote access

to any application from any device type. NetScaler products are easily selected by determining

the edition providing functional needs and the appropriate physical or virtual appliance platform

to fulfill performance needs.

Feature

Platinum

_Edition

Enterprise

_Edition

Standard

_Edition

NetScaler

_Gateway

*Universal

_License

Application availability

L4 load balancing and L7 content switching

•

Microsoft SQL, MYSQL

•

AppExpert rate controls

•

IPv6 support

•

Traffic domains

•

Subscriber-aware traffic steering

•

Global server load balancing (GSLB)

•

Carrier-Grade Network Address Translation (CGNAT)

•

Dynamic routing protocols

•

Surge protection and priority queuing

•

TriScale Clustering

•

Application acceleration

Client and server TCP optimizations

•

AppCompress

•

AppCache

•

Application security

L4 DoS defenses

•

L7 DoS defenses

•

L7 rewrite and responder

•

XenMobile NetScaler connector

•

AAA for traffic management

•

NetScaler AppFirewall with XML security

•

NetScaler CloudBridge connector

•

Front-end optimization*

Content layout

•

Domain sharding

•

Image optimization

•

Style sheets and JavaScript optimization

•

TCP Protocol optimization

Multi-path TCP

•

BIC and cubic TCP

•

(2)

Feature

Platinum

_Edition

Enterprise

_Edition

Standard

_Edition

NetScaler

_Gateway

*Universal

_License

Simple manageability

NetScaler Insight Center-Web Insight

•

NetScaler Insight Center-HDX Insight

•

AppExpert visual policy builder

•

ActionAnalytics

•

AppExpert service callouts, templates and visualizers

•

Role-based administration and AAA for administration

•

Configuration wizards

•

Native Citrix web interface

•

Citrix command center

•

Unified Gateway

Federated Identity

•

One URL/SSO using SAML 2.0

•

Centralized Policy Management (SmartControl)

•

Stateless RDP proxy

•

Cluster for ICA proxy (Striped)

•

Monitoring of XenApp/XenDesktop traffic (Real time)

•

Monitoring of XenApp/XenDesktop traffic (Historical)

•

NetScaler Gateway

Broad client support for plugins

•

Customizable web portal

•

SSL VPN remote access

•

ICA proxy to XenApp and XenDesktop

•

Contextual policies for XenApp/XenDesktop (SmartAccess)

•

End Point Analysis

•

Secure browser-only access (CVPN)

•

• Standard •Option

(3)

NetScaler Platform

MPX 25160T

MPX 25100T

Platform attributes

Processor Dual Intel E5-2680v2 Dual Intel E5-2680v2

Memory 128 128

Ethernet ports

(Published Ethernet interfaces compliant per IEEE802.3-2002/2005/2008/2012)

32x10G SFP+ 32x10G SFP+

Transceivers support 10GE SFP+; 1G SFP - Cu 10GE SFP+; 1G SFP - Cu Pay as you grow and

BurstPack license upgrades Upgrade option to MPX 25160T

Platform performance System throughput, Gbps (L7 throughput) 160 100 L7 HTTP requests/sec 4,600,000 3,200,000 SSL transactions/sec (2K key certificates) 2,000 1,400 SSL throughput, Gbps 21 15 Compression throughput, Gbps 14 10 .5

ICA Proxy/SSL VPN concurrent users 35,000 35,000

Number of instances included

(For SDX models) Not Applicable Not Applicable

Platform mechanical, environmental and regulatory

Power supplies 2 2

Input voltage and frequency ranges 100-240VAC full range, 50-60 Hz 100-240VAC full range, 50-60 Hz

Optional DC power supply Yes Yes

Max power supply 1000W 1000W

Typical/max power consumption 594W/717W 594W/717W

Weight, lbs 60 60

Height 2U 2U

Width EIA 310-D, IEC 60297, DIN 41494 SC48D

rack width with mounting brackets EIA 310-D, IEC 60297, DIN 41494 SC48D rack width with mounting brackets

Depth 28 1/4"/72 cm 28 1/4"/72 cm

Operating temperature 0-40C 0-40C

Allowed relative humidity 20%-80%, non-condensing 20%-80%, non-condensing

Safety certifications CSA CSA

Electromagnetic emissions certifications

and susceptibility standards FCC (Part 15 Class A), DoC, CE,VCCI, CNS, AN/NES FCC (Part 15 Class A), DoC, CE, VCCI, CNS, AN/NES

(4)

NetScaler Platform

MPX/SDX 24150

MPX/SDX 24100

MPX/SDX 22120

MPX/SDX 22100

Processor Dual Intel E5-2690 Dual Intel E5-2690 Dual Intel E5-2690 Dual Intel E5-2690

Memory 256 GB 256 GB 256 GB 256 GB

Ethernet ports

24X10GE SFP+ and 12XGE SFP

(fiber or copper) 24X10GE SFP+ and 12XGE SFP (fiber or copper) 24x 10GBASE-X SFP+ OR (for NEBS models) 24x 10GBASE-X SFP+ 12x 1000BASE-X SFP (fiber or copper)

24x 10GBASE-X SFP+ OR (for NEBS models) 24x 10GBASE-X SFP+ 12x 1000BASE-X SFP (fiber or copper)

Transceivers support 10GE SFP+: 1G SFP - SR, LR, Cu 10GE SFP+: 1G SFP - SR, LR, Cu 10GE SFP+: SR, LR; 1G SFP: SX, LX 10GE SFP+: SR, LR Pay as you grow and

BurstPack license upgrades Upgrade option to MPX/SDX 24150 Upgrade option to MPX/SDX 22120 Platform performance

System throughput, Gbps

(L7 throughput) 150 100 120 100

L7 HTTP requests/sec (MPX/SDX) 5,800,000 3,500,000 4,700,000/3,700,000 4,500,000/3,700,000 SSL transactions/sec

(2K key certificates) 135,000 100,000 560,000155,000 (NEBS) 460,000 130,000 (NEBS) SSL throughput, Gbps (MPX/SDX) 44 40 75/56 42 (NEBS) 65/56 35 (NEBS) Compression throughput, Gbps

(MPX/SDX) 14.6 10 14/12.8 14/12.8

ICA Proxy/SSL VPN concurrent users 35,000 35,000 35,000 35,000

Number of Instances included

(For SDX models) 80 40 80 80

Power supplies 4 4 4 4

Input voltage and frequency ranges 100-240VAC full range,

47-63 Hz 100-240VAC full range, 47-63 Hz 100-240VAC full range, 47-63 Hz 100-240VAC full range, 47-63 Hz

Optional DC power supply Yes Yes Yes Yes

Max power supply 1100W 3753 BTU/Hr 1100W 3753 BTU/Hr 1100W 3753 BTU/Hr 1100W 3753 BTU/Hr Typical power consumption 850W 2900 BTU/Hr 850W 2900 BTU/Hr 850W 2900 BTU/Hr 850W 2900 BTU/Hr

Weight, lbs 58 58 58 58

Height 2U 2U 2U 2U

Width EIA 310-D, IEC 60297, DIN 41494 SC48D rack width with mounting brackets

EIA 310-D, IEC 60297, DIN 41494 SC48D rack width with mounting brackets

EIA 310-D, IEC 60297, DIN 41494 SC48D rack width with mounting brackets Depth 28" / 71.2 cm 28" / 71.2 cm 28" / 71.2 cm 28" / 71.2 cm

Operating temperature 0-40C 0-40C 0-40C 0-40C

Allowed relative humidity 5%-95%, non-condensing 5%-95%, non-condensing 5%-95%, non-condensing 5%-95%, non-condensing

Safety certifications CSA CSA CSA CSA

and susceptibility standards FCC (Part 15 Class A), DoC, CE, VCCI, CNS, AN/NES FCC (Part 15 Class A), DoC, CE, VCCI, CNS, AN/NES FCC (Part 15 Class A), DoC, CE, VCCI, CNS, AN/NES FCC (Part 15 Class A), DoC, CE, VCCI, CNS, AN/NES Regulatory compliance RoHS RoHS RoHS; NEBS Level 3 available RoHS; NEBS Level 3 available

(5)

NetScaler Platform

MPX/SDX 22080

MPX/SDX 22060

MPX/SDX 22040

MPX/SDX 14100

Processor Dual Intel E5-2690 Dual Intel E5-2690 Dual Intel E5-2690 Dual Intel E5-2630v2

Ethernet ports

24x 10GBASE-X SFP+ OR (for NEBS models) 24x 10GBASE-X SFP+ 12x 1000BASE-X SFP (fiber or copper)

16x 10GE SFP+

Transceivers support 10GE SFP+: SR, LR 10GE SFP+: SR, LR 10GE SFP+: SR, LR 10GE SFP+: SR, LR; 1G cu Pay as you grow and

BurstPack license upgrades Upgrade option to MPX/SDX 22100 and 22120 Upgrade option to MPX/SDX 22080, 22100 and 22120 Upgrade option to MPX/SDX 22060, 22080, 22100 and 22120 Platform performance System throughput, Gbps (L7 throughput) 80 60 40 100 L7 HTTP requests/sec (MPX/SDX) 4,000,000/3,700,000 3,500,000 2,600,000 3,000,000 SSL transactions/sec

(2K key certificates) 340,000 80,000 (NEBS) 225,000 65,000 (NEBS) 120,000 40,000 (NEBS) 69,000 SSL throughput, Gbps 55 30 (NEBS) 45 22 (NEBS) 35

18 (NEBS) 45

Compression throughput, Gbps 12.5 11 8 9.4

Number of Instances included

Optional DC power supply Yes Yes Yes YES

Max power supply 1100W 3753 BTU/Hr 1100W 3753 BTU/Hr 1100W 3753 BTU/Hr 528W

Typical power consumption 850W 2900 BTU/Hr 850W 2900 BTU/Hr 850W 2900 BTU/Hr 300W 1024 BTU/Hr

Weight, lbs 58 58 58 60

Height 2U 2U 2U 2U

EIA 310-D, IEC 60297, DIN 41494 SC48D rack width

with mounting brackets

Depth 28" / 71.2 cm 28" / 71.2 cm 28" / 71.2 cm 28” / 71.2 cm

Allowed relative humity 5%-95%, non-condensing 5%-95%, non-condensing 5%-95%, non-condensing 5%-95%, non-condensing

and susceptibility standards FCC (Part 15 Class A), DoC, CE, VCCI, CNS, AN/NES FCC (Part 15 Class A), DoC, CE, VCCI, CNS, AN/NES FCC (Part 15 Class A), DoC, CE, VCCI, CNS, AN/NES FCC (Part 15 Class A),DoC, CE, VCCI, CNS, AN/NES Regulatory compliance RoHS; NEBS Level 3 available RoHS; NEBS Level 3 available RoHS; NEBS Level 3 available RoHS

(6)

NetScaler Platform

MPX/SDX 14080

MPX/SDX 14060

MPX/SDX 14040

MPX/SDX 14030

Processor Dual Intel E5-2630v2 Dual Intel E5-2630v2 Dual Intel E5-2630v2 Dual Intel E5-2630v2

Ethernet ports 16x 10GE SFP+ 16x 10GE SFP+ 16x 10GE SFP+ 16x 10GE SFP+

Transceivers support 10GE SFP+: SR, LR; 1G cu 10GE SFP+: SR, LR; 1G cu 10GE SFP+: SR, LR; 1G cu 10GE SFP+: SR, LR; 1G cu Pay as you grow Upgrade option to

MPX/SDX 14100 Upgrade option to MPX/SDX 14080 and 14100 Upgrade option to MPX/SDX 14060, 14080 and 14100 Upgrade option to MPX/SDX 14040, 14060, 14080 and 14100 Platform performance System throughput, Gbps 80 60 40 30 HTTP requests/sec 2,800,000 2,400,000 1,800,000 1,700,000 SSL transactions/sec (2k) 69,000 69,000 42,000 30,000 SSL throughput 34 29.5 23 20 Compression throughput 8.5 7.7 6 5

ICA Proxy/SSL VPN users concurrent users 20,000 20,000 20,000 20,000

Number of instances included 25 25 10 10

Platform Mechanical

Input voltage 100-240VAC full range, 47-63

Hz 100-240VAC full range, 47-63 Hz 100-240VAC full range, 47-63 Hz 100-240VAC full range, 47-63 Hz

Max power consumption 528W 528W 528W 528W

Typical power consumption 300W 1024 BTU/Hr 300W 1024 BTU/Hr 300W 1024 BTU/Hr 300W 1024 BTU/Hr

Weight, lbs 60 60 60 60

Height 2U 2U 2U 2U

Depth 28” / 71.2 cm 28” / 71.2 cm 28” / 71.2 cm 28” / 71.2 cm

Operating temp. 0-40C 0-40C 0-40C 0-40C

Allowed relative humidity 5%-95%, non-condensing 5%-95%, non-condensing 5%-95%, non-condensing 5%-95%, non-condensing

Safety certs CSA CSA CSA CSA

Electromagnetic emissions certs FCC (Part 15 Class A),

DoC, CE, VCCI, CNS, AN/NES FCC (Part 15 Class A),DoC, CE, VCCI, CNS, AN/NES FCC (Part 15 Class A), DoC, CE, VCCI, CNS, AN/NES FCC (Part 15 Class A), DoC, CE, VCCI, CNS, AN/NES

(7)

NetScaler Platform

MPX/SDX 14020

MPX/SDX 11542

MPX/SDX 11540

MPX/SDX 11530

MPX/SDX 11520

MPX/SDX 11515

Processor Dual Intel E5-2630v2 Dual Intel Xeon E5645 Dual Intel Xeon E5645 Dual Intel Xeon E5645 Dual Intel Xeon

E5645 Dual Intel Xeon E5645

Memory 64 GB 48 GB 48 GB 48 GB 48 GB 48 GB Ethernet ports (Published Ethernet interfaces compliant per IEEE802.3-2002/2005/2008/2012)

16x 10GE SFP+ 8x10GBASE-X SFP+ AND 4x1000BASE-X SFP (fiber or copper) 8x10GBASE-X SFP+ AND 4x1000BASE-X SFP (fiber or copper) 8x10GBASE-X SFP+ AND 4x1000BASE-X SFP (fiber or copper) 8x10GBASE-X SFP+ AND 4x1000BASE-X SFP (fiber or copper) 8x10GBASE-X SFP+ AND 4x1000BASE-X SFP (fiber or copper) Transceivers support 10GE SFP+: SR, LR;

1G cu 10GE SFP+: SR, LR1 GE SFP: SX, LX 10GE SFP+: SR, LR;1 GE SFP: SX, LX 10GE SFP+: SR, LR;1 GE SFP: SX, LX 10GE SFP+: SR, LR;1 GE SFP: SX, LX 10GE SFP+: SR, LR;1 GE SFP: SX, LX Pay as you grow and

BurstPack license upgrades Upgrade option toMPX/SDX 14030, 14040, 14060, 14080 and 14100 Upgrade option to MPX/SDX 11542 Upgrade option to MPX/SDX 11540 and 11542 Upgrade option to MPX/SDX 11530, 11540 and 11542 Upgrade option to MPX/SDX 11520, 11530, 11540 and 11542 Platform performance System throughput, Gbps (L7 throughput) 20 42 40 30 20 15 L7 HTTP requests/sec (MPX/ SDX) 1,400,000 2,700,000 /2,000,000 2,500,000 /2,000,000 2,200,000 /2,000,000 1,800,000 1,600,000 SSL transactions/sec (2K key certificates) 22,000 69,000 43,000 30,000 25,000 22,500 SSL throughput, Gbps 14 20.5 19 17 15 14 Compression throughput, Gbps 4.4 8/7 7.5/7 6.5 6 5 ICA Proxy/SSL VPN concurrent users 20,000 20,000 20,000 20,000 20,000 20,000 Number of instances included (for SDX models) 5 20 20 20 20 5

Power supplies 2 2 2 2 2 2

Input voltage and frequency

ranges 100-240VAC full range, 47-63 Hz 100-240VAC full range, 47-63 Hz 100-240VAC full range, 47-63 Hz 100-240VAC full range, 47-63 Hz 100-240VAC full range, 47-63 Hz 100-240VAC full range, 47-63 Hz

Optional DC power supply Yes Yes Yes Yes Yes Yes

Max power supply 528W 650W 2219 BTU/Hr 650W 2219 BTU/Hr 650W 2219 BTU/Hr 650W 2219 BTU/Hr 650W 2219 BTU/Hr Typical power consumption 300W 1024 BTU/Hr 500W 1706 BTU/Hr 500W 1706 BTU/Hr 500W 1706 BTU/Hr 500W 1706 BTU/Hr 500W 1706 BTU/Hr

Weight, lbs 60 45 45 45 45 45

Height 2U 2U 2U 2U 2U 2U

EIA 310-D, IEC 60297, DIN

41494 SC48D rack width with mounting brackets

EIA 310-D, IEC 60297, DIN 41494 SC48D rack width with mounting brackets EIA 310-D, IEC 60297, DIN 41494 SC48D rack width with mounting brackets EIA 310-D, IEC 60297, DIN 41494 SC48D rack width with mounting brackets EIA 310-D, IEC 60297, DIN 41494 SC48D rack width with mounting brackets Depth 28” / 71.2 cm 28” / 71 cm 28" / 71 cm 28" / 71 cm 28" / 71 cm 28" / 71 cm Operating temperature 0-40C 0-40C 0-40C 0-40C 0-40C 0-40C

Allowed relative humity 5%-95%,

non-condensing 5%-95%, non-condensing 5%-95%, non-condensing 5%-95%, non-condensing 5%-95%, non-condensing 5%-95%, non-condensing

Safety certifications CSA CSA CSA CSA CSA CSA

Electromagnetic emissions certifications and susceptibility standards

FCC (Part 15 Class A), DoC, CE, VCCI, CNS, AN/NES

FCC (Part 15 Class A), DoC,

CE, VCCI, CNS, AN/NES

FCC (Part 15 Class A), DoC, CE, VCCI, CNS, AN/NES

(8)

NetScaler Platform

MPX 15500 FIPS

MPX 12500 FIPS

MPX 10500 FIPS

MPX 9700 FIPS

Processor Dual Intel Xeon E5440 Dual Intel Xeon E5440 Dual Intel Xeon E5440 Dual Intel Xeon E5440

Ethernet ports

(Published Ethernet interfaces compliant per IEEE802.3-2002/2005/2008/2012) 2x 10GBASE-X SFP+ AND 8x 1000BASE-X SFP (fiber or copper) 2x 10GBASE-X SFP+ AND 8x 1000BASE-X SFP (fiber or copper) 2x 10GBASE-X SFP+ AND 8x 1000BASE-X SFP (fiber or copper) 2x 10GBASE-X SFP+ AND 8x 1000BASE-X SFP (fiber or copper) Transceivers support 10GE SFP+: SR, LR;

1 GE SFP: SX, LX 10GE SFP+: SR, LR;1 GE SFP: SX, LX 10GE SFP+: SR, LR;1 GE SFP: SX, LX 10GE SFP+: SR, LR;1 GE SFP: SX, LX Pay as you grow and

BurstPack license upgrades Upgrade option to FIPS version of MPX 15500 Upgrade option to FIPS versions of MPX 12500 and MPX 15500 Upgrade option to FIPS versions of MPX 10500, MPX 12500 and MPX 15500 Platform performance

(L7 throughput) 15 10 6 3

L7 HTTP requests/sec (MPX/SDX) 1,200,000 700,000 500,000 200,000

SSL transactions/sec (2K key certificates) 8,000 6,000 4,000 2,000

SSL throughput, Gbps 4.5 3.6 2.0 1.0

Compression throughput, Gbps 6.5 6 5 2

(for SDX models) Not applicable Not applicable Not applicable Not applicable Platform mechanical, environmental and regulatory

Weight, lbs 30 30 30 30

Height 2U 2U 2U 2U

EIA 310-D, IEC 60297, DIN 41494 SC48D rack width with mounting brackets Depth 28" / 71 cm 28" / 71 cm 28" / 71 cm 28" / 71 cm

and susceptibility standards FCC (Part 15 Class A), DoC, CE, VCCI, CNS, AN/NES FCC (Part 15 Class A), DoC, CE, VCCI, CNS, AN/NES FCC (Part 15 Class A), DoC, CE, VCCI, CNS, AN/NES FCC (Part 15 Class A), DoC, CE, VCCI, CNS, AN/NES Regulatory compliance RoHS; FIPS 140-2, Level 2 RoHS; FIPS 140-2, Level 2 RoHS; FIPS 140-2, Level 2 RoHS; FIPS 140-2, Level 2

(9)

NetScaler Platform

MPX/SDX 8015

MPX 8005

MPX 5650

MPX 5550

Processor Intel E3-1275 Intel E3-1275 Intel E3-1225 Intel E3-1225

Ethernet ports

(Published Ethernet interfaces compliant per IEEE802.3-2002/2005/2008/2012) 6x 10/100/1000 BASE-T AND 6x1000BASE-X SFP (fiber or copper) OR 6x 10/100/1000 BASE-T AND 2x10G BASE-X SFP+ 6x 10/100/1000 BASE-T AND 6x1000BASE-X SFP (fiber or copper) OR 6x 10/100/1000 BASE-T AND 2x10G BASE-X SFP+ 6x10/100/1000 BASE-T 6x10/100/1000 BASE-T

Transceivers support 10GE SFP+: SR, LR;

1 GE SFP: SX, LX 10GE SFP+: SR, LR;1 GE SFP: SX, LX Pay as you grow and

BurstPack license upgrades Upgrade options to MPX/ SDX 8015 Upgrade option to MPX 5650 Platform performance

(L7 throughput) 15 5 5 0.5

L7 HTTP requests/sec (MPX/SDX) 1,200,000 375,000 350,000 175,000

SSL transactions/sec (2K key certificates) 11,000 6,500 2,800 1,500

SSL throughput, Gbps 6 4 2 0.5

Compression throughput, Gbps 3.5 2.3 3 0.5

Number of instances included (for SDX models)1

2 Not applicable Not applicable Not applicable

Power supplies 1 (2nd optional) 1 (2nd optional) 1 1

Optional DC power supply Yes Yes No No

Weight, lbs 32 32 32 32

Height 1U 1U 1U 1U

Depth 28" / 71 cm 28" / 71 cm 28" / 71 cm 28" / 71 cm

and susceptibility standards FCC (Part 15 Class A), DoC, CE, VCCI, CNS, AN/NES FCC (Part 15 Class A), DoC, CE, VCCI, CNS, AN/NES FCC (Part 15 Class A), DoC, CE, VCCI, CNS, AN/NES FCC (Part 15 Class A), DoC, CE, VCCI, CNS, AN/NES

Regulatory compliance RoHS RoHS RoHS RoHS

(10)

NetScaler Platform

MPX/SDX 21550

MPX/SDX 20550

MPX/SDX 19550

MPX/SDX 17550

Processor Dual Intel X5680 Dual Intel X5680 Dual Intel X5680 Dual Xeon X5680

Ethernet ports

8x 10GBASE-X SFP+ 8x 10GBASE-X SFP+ 8x 10GBASE-X SFP+ 8x 10GBASE-X SFP+ Transceivers support 10GE SFP+: SR, LR 10GE SFP+: SR, LR 10GE SFP+: SR, LR 10GE SFP+: SR, LR; Pay as you grow and

BurstPack license upgrades Upgrade option to MPX/SDX 21550 Upgrade option to MPX/SDX 20550 and MPX/SDX 21550 Upgrade option to MPX/SDX 19550, MPX/SDX 20550 and MPX/SDX 21550 Platform performance System throughput, Gbps (L7 throughput) 50 40 30 20 L7 HTTP requests/sec (MPX/SDX) 3,700,000 3,500,000 3,000,000 2,400,000 SSL transactions/sec (2K key certificates) 98,000 73,000 (MPX)68,000 (SDX) 50,000 33,000 SSL throughput, Gbps 11 10 9 8 Compression throughput, Gbps 11 (MPX) / 10 (SDX) 9 8 7

Weight, lbs 49 49 58 49

Height 2U 2U 2U 2U

Width EIA 310-D, IEC

60297, DIN 41494 SC48D rack width with mounting brackets

EIA 310-D, IEC

Depth 28" / 71.2 cm 28" / 71.2 cm 28" / 71.2 cm 28" / 71 cm

Allowed relative humity 5%-95%, non-condensing 5%-95%, non-condensing 5%-95%, noncondensing 5%-95%, non-condensing

and susceptibility standards FCC (Part 15 Class A), DoC, CE, VCCI, CNS, AN/NES FCC (Part 15 Class A), DoC, CE, VCCI, CNS, AN/NES FCC (Part 15 Class A), DoC, CE, VCCI, CNS, AN/NES FCC (Part 15 Class A), DoC, CE, VCCI, CNS, AN/NES

(11)

Technical Aspects

Unified Gateway

• Provides consolidation of secure remote access infrastructure with One URL

• Provides SAML 2.0 federated identity to enable Single Sign-On across all applications whether in a datacenter or in a cloud

• One URL to access any application • Stateless RDP proxy

• Support for Linux (Ubuntu 14.04 32bit / 64bit, Ubuntu 12.04 32bit / 64bit

• Support for Mac (OS X 10.9 (Mavericks), OS X 10.10 (Yosemite)

• Support for Windows 7, 8, and 8.1 (32bit / 64bit) • Support for iOS 7.1 or later. Compatible with iPhone, iPad

and iPod touch.

• Support for Android 4.1.x & 4.2.x (Jelly Bean), 4.4.x (KitKat), 5.x (Lollipop).

L4-7 traffic management

Layer 4 load balancing (LB)

• Protocols supported: TCP, UDP, FTP, HTTP, HTTPS, DNS (TCP and UDP), SIP (over UDP), RTSP, RADIUS, DIAMETER, SQL, RDP, IS-IS, SMPP

• Algorithms: Round Robin, Least Packets, Least Bandwidth, Least Connections, Response Time, Hashing (URL, Domain, Source IP, Destination IP, and CustomID), SNMP-provided metric, Server Application State Protocol (SASP) • Session persistence: Source IP, cookie, server, group, SSL

session, SIP CALLID, Token-based, SESSIONID, Diameter AVP • Session protocols: TCP, UDP, SSL_TCP, Multi-path TCP, SPDY • Server monitoring: Ping, TCP, URL, ECV, scriptable health

checks, Dynamic Server Response Time • Link load balancing

• CloudBridge load balancing Layer 7 content switching

• Policies: URL, URL Query, URL Wildcard, Domain, Source/ Destination IP, HTTP Header, Custom, HTTP and TCP Payload Values, UDP, Diameter AVP

• Switch requests based on protocol of incoming packets Database load balancing

• Support for: Microsoft SQL Server and MySQL

• Switching algorithms include SQL query parameters such as user and database names and command parameters • Token-based load balancing provides advanced

configuration for persistence and fault tolerant deployments TriScale Clustering2

• “Scale-Out” with clustering up to 32 NetScaler appliances into single system image and up to 3 Tbps throughput

• Configuration Coordinator node for centralized management and synchronization

• Compatible with Pay-As-You-Grow and Burst Pack performance upgrades

• Traffic distribution mechanisms include: Equal Cost Multiple Path (ECMP), Link-sets, and Cluster Link Aggregation Group (CLAG)

• Available on NetScaler MPX, SDX and VPX and with NetScaler EE and PE editions

• Modules may be configured on all nodes in a cluster or using “spotted VIPS” they are added only to a select subset of nodes Rate-based policy enforcement

• Trigger NetScaler policies based upon connections per second, packets per second, or bandwidth used • Source or destination-based upon header or payload

information Traffic domains

• Allows overlapping IP addresses

• Provides separate routing flows within a single appliance • Enables basic multi-tenancy implementations

Global server load balancing (GSLB)

• Algorithms: site health, geographic proximity, network proximity, connections, bandwidth, AG-E SSL VPN users • Site health checking on status, connection load, packet rate,

SNMP-provided metrics

Surge protection and priority queuing2

• Adaptive rate control for TCP connections and HTTP requests • Prioritized transaction dispatch for critical application requests Carrier-Grade Network Address Translation2

• Support for: Full-cone NAT, Deterministic NAT,

Endpoint-Independent Mapping and Filtering, Hair-pinning • Application Layer Gateways: FTP, TFTP, ICMP, SIP, RTSP,

PPTP, GRE

Subscriber-aware traffic steering • Policy control interface: Gx, RADIUS

Application acceleration

TCP optimization

• Multiplexing, Buffering, Connection Keep-alive, Windows Scaling, Selective Acknowledgement, Fast Ramp, TCP Westwood

• AppCompress

• Gzip-based compression for HTTP traffic AppCache3

• Caching for static and dynamic application content • HTTP GET and POST method support

(12)

Application security

DoS attack defense

• Continue service to legitimate users while protecting against attacks such as: SYN Flood, HTTP DoS, and Ping of Death • ICMP and UDP rate control

Content rewriting and response control

• Policy-based bidirectional rewriting of HTTP header and payload elements

• Policy-based redirection of incoming requests • Body URL rewrite

• Responder module

• Custom responses and redirects • Policy-based routing

• Network aware policies DNSSEC

• DNS proxy • Authoritative DNS • DNS signing Packet filtering

• Layer 3 and 4 Access Control Lists (ACL) • Network Address Translation (NAT) • IPv4/IPv6 Network Address Translation (NAT) NetScaler AppFirewall with hybrid security model3

• Positive security model protects against: Buffer Overflow, CGI-BIN Parameter Manipulation, Form/Hidden Field Manipulation, Forceful Browsing, Cookie or Session Poisoning, Broken ACLs, Cross-Site Scripting (XSS), Command Injection, SQL Injection, Error Triggering Sensitive Information Leak, Insecure Use of Cryptography, Server Misconfiguration, Back Doors and Debug Options, Rate-based Policy Enforcement, Well known Platform Vulnerabilities, Zero-day Exploits, Cross Site Request Forgery (CSRF), credit card and other sensitive data leakage prevention

• Negative security model with automatically updated signatures to protect against L7 and HTTP application vulnerabilities.

• Integrates with third party scanning tools • Common event format (CEF) logs • XML security: XML Denial of Service (xDoS)

• XML SQL injection and cross site scripting, XML message

Secure access

• XA/XD/XM integration • Device certificate scanning

• Single sign-on using NTLM/Kerberos/SAML etc. • SmartAccess: Adaptive application and action control

enforced on XenApp and XenDesktop servers • SmartControl: Adaptive application and action control

enforced on NetScaler, thereby provising centralized policy management and security at the edge

• Integrated NetScaler Gateway SSL VPN

• Five SSL VPN concurrent user (CCU) licenses included in Standard and Enterprise Editions and 100 CCUs included in Platinum Edition

• End point analysis of user device

• SAML 2-factor and client certificate authentication; passwords for single sign on to backend services stored on NetScaler • AAA traffic management

• SAML 2.0 and NTLMv1/2 support for configuring NetScaler with single sign-on (SSO)

• Active Directory, LDAP, RADIUS, TACACS +, OCSP NetScaler CloudBridge Connector3

• Network connectivity protection via IPSec security • Datacenter extension through GRE-based network bridging Support for XenMobile MDM5

• Front end optimization scalable to over 100,000 concurrent users

• XenMobile NetScaler Connector (XNC) provides a device level authorization service

• Application level policy controlled SSL VPN tunneling for mobile clients

Network integration

• Static routes, monitored static routes, weighted static routes • OSPF, RIP1/2, BGP2

• VLAN 802.1Q

• Link Aggregation 802.3ad

• Stateful IPv6 to IPv4 network address translation and DNS64 • Static and stateless network address translation from IPv4

to IPv6 High availability

(13)

About Citrix

Citrix (NASDAQ:CTXS) is leading the transition to software-defining the workplace, uniting virtualization, mobility management, networking and SaaS solutions to enable new ways for businesses and people to work better. Citrix solutions power business mobility through secure, mobile workspaces that provide people with instant access to apps, desktops, data and communications on any device, over any network and cloud. With annual revenue in 2014 of $3.14 billion, Citrix solutions are in use at more than 330,000 organizations and by over 100 million users globally. Learn more at www.citrix.com

Copyright © 2015 Citrix Systems, Inc. All rights reserved. Citrix, NetScaler, AppCompress, AppCache, NetScaler Gateway, XenMobile, AppFirewall, CloudBridge, NetScaler Insight Center, HDX Insight, ICA, NetScaler MPX, NetScaler SDX, NetScaler VPX, AppFlow, EdgeSight,

Simplified installation and management

User interface

• Graphical application visualizer • Secure web-based GUI • CLI, Telnet, SSH, Console • Real-time performance dashboard

• LB, GSLB Application Firewall and EdgeSight®_{for NetScaler}

configuration wizards • XenApp configuration wizards Policy management

• AppExpert Visual Policy Builder

• Policy extensibility via HTTP service callouts • AppExpert templates

• AppExpert Visualizers Citrix Command Center

• Centralized configuration and management of over 200 NetScaler appliances.

NetScaler Insight Center and AppFlow:

• NetScaler Insight Center is a software solution enabling traffic visibility; it includes HDX Insight and Web Insight and is based on AppFlow.

• HDX Insight parses ICA sessions to provide troubleshooting, network analysis and end-to-end performance for XenApp/XenDesktop sessions. Historical data included in Platinum Edition.

• Web Insight monitors real-time web application traffic and assists capacity planning and helps ensure SLAs.

• AppFlow Standards-based NetFlow/IPFIX (Internet Protocol Flow Information Export) solution

• Supported by leading performance monitoring and management vendors

• Provides transaction level visibility for HTTP, SSL, TCP, and SSL/TCP flows

Action analytics

• Aggregates real-time traffic statistics and enables their use in setting dynamic policies

• Charting and analysis utilities using HDX Insight Third party management support

• SNMPv1, SNMPv2 and SNMPv3: NetScaler MIB and MIB-II support

• Microsoft System Center Operations Management (SCOM) support

• Microsoft System Center Virtual Machine Manager (SCVMM) support

• XML/SOAP API for automated application-driven configuration

Real-time consolidated logging

• Offloads logging from application server to central location Native web interface

• Integrated Web Interface Server for XenApp and XenDesktop

• Supports JAVA environments with MPX and VPX platforms running NetScaler nCore OS

• Authentication methods include: LDAP, RADIUS, NTLM, TACACS+, Client Certificate

• Manage HTTPS requests via included SSL VPN • Wizards-based configuration through NetScaler GUI • Login page customization

• Includes Smart Access, smooth roaming, STA server redundancy, and session reliability

Lower total cost of ownership

Web cache redirection2

• Automatically direct requests with content not cached on NetScaler to cache farm

• N-tier multilayer load balancing support of cache servers

1. Additional NetScaler packs with 3 (8xxx) or 5 (all other models) instances each are available. For SDX 8015 maximum number of instances is 5.

2. Available in NetScaler Enterprise and Platinum editions only.

3. Included in Platinum edition only; not available with Standard or Enterprise editions.

4. Available as a license upgrade on all editions and for MPX, SDX (excluding 22000 series) and VPX appliances. 5. Enterprise edition with AppCache or Platinum edition recommended.